Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PlvYT2y_S8JobKDcEeU2oUgvBYg.roa
File: PlvYT2y_S8JobKDcEeU2oUgvBYg.roa (raw, json)
Hash identifier: iHdYdhJgAkcWVApfO/32CouscCMXzG1SRMAH3BLHjJQ=
Subject key identifier: 3E:5B:D8:4F:6C:BF:4B:C2:68:6C:A0:DC:11:E5:36:A1:48:2F:05:88
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A16F04784C52207FACCA5B6D9148D0BCA9
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PlvYT2y_S8JobKDcEeU2oUgvBYg.roa
Signing time: Sat 24 Oct 2026 17:45:26 +0000
ROA not before: Sat 24 Oct 2026 17:45:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218312
IP address blocks: 87.85.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:04:78:4c:52:20:7f:ac:ca:5b:6d:91:48:d0:bc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 24 17:45:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e5bd84f6cbf4bc2686ca0dc11e536a1482f0588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8e:ff:97:57:cf:71:82:1e:b1:c1:ab:9e:a1:
93:cd:64:e4:1b:ff:23:7f:ba:94:df:1c:b9:c3:be:
d7:f3:97:93:c1:ab:10:a0:65:dc:05:89:57:40:04:
c4:3b:eb:ce:51:0a:aa:ae:cd:a9:41:6b:67:1c:31:
52:84:77:54:98:bc:4e:8e:a6:73:29:bf:92:4f:92:
2a:52:34:49:26:18:89:31:48:d0:7f:4d:dc:f0:61:
16:e7:93:c0:bb:3f:6f:d3:b2:c2:cb:87:a8:ad:c9:
f7:68:20:1d:d5:c0:16:25:69:0c:1d:94:54:85:0a:
fd:13:41:f6:d2:83:1f:68:ec:e2:51:ca:9c:fc:f9:
cc:c5:4c:28:94:ee:3b:4d:86:16:32:1d:8e:8f:9c:
05:8d:14:d1:81:2e:eb:73:66:c1:39:63:e0:cd:40:
a6:ca:e2:e0:a5:98:50:78:52:8b:2f:87:e3:7b:6d:
8c:71:5e:e9:b5:90:24:e4:11:34:86:63:f0:89:45:
bc:2b:d7:3b:1b:09:e5:78:cc:0a:7c:86:c2:f1:ff:
0a:b4:f7:ed:19:4d:43:d8:60:b3:0c:15:25:de:24:
bf:fd:a2:41:d7:d2:15:b8:a2:dd:cd:96:b2:42:31:
29:a4:fd:ad:1e:4d:74:68:8d:11:88:01:91:e1:e7:
aa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5B:D8:4F:6C:BF:4B:C2:68:6C:A0:DC:11:E5:36:A1:48:2F:05:88
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PlvYT2y_S8JobKDcEeU2oUgvBYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.75.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:69:e4:7a:53:62:68:c9:25:24:18:6f:31:b8:44:b8:50:97:
8d:fb:2f:bd:55:3d:52:ec:9d:77:67:67:7b:0c:c6:7d:44:ba:
e1:fb:cc:f1:df:ff:26:94:97:d8:93:e8:ea:fc:f2:ef:e9:b2:
2b:cb:60:33:c8:fb:ce:d5:4d:0d:f8:3a:f1:bb:0c:81:05:c5:
62:cd:39:b5:dd:b1:81:c7:7a:ad:69:71:2f:5f:e7:4f:ad:49:
fb:ea:ca:4d:f8:53:89:2c:62:f4:dd:b9:e6:8f:b6:be:7e:da:
36:5e:96:e6:64:59:dd:3f:98:d4:d6:ca:fa:5c:24:41:24:73:
f2:30:d1:1e:a9:92:d3:6c:b7:5c:ee:a7:63:01:c7:e7:91:fe:
eb:7c:99:72:23:11:56:7b:f1:0f:1a:44:2d:ac:30:3f:68:02:
40:17:0f:aa:10:ee:90:5c:7d:e8:f2:85:cd:0e:2c:26:e1:99:
07:03:d6:e8:d9:84:d9:25:aa:dd:6f:3c:cd:28:70:73:d8:42:
73:21:87:f2:4e:6f:be:45:41:71:2b:cb:d1:53:6a:ba:12:ae:
75:20:55:a1:b2:4e:77:01:85:bc:43:cf:a4:0c:f8:03:6e:98:
72:2c:b8:89:26:99:72:78:0a:c3:1b:36:bc:fb:07:c8:fc:12:
8d:48:40:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:33 2026 by rpki-client